MEDICAL IMAGING DEVICE, METHOD AND COMPUTER PROGRAM FOR USE IN A SAFETY CRITICAL ENVIRONMENT

Description

[0001] The present invention relates to a medical imaging device which includes a central control unit and a plurality of peripheral apparatus which communicate with the central control unit.
Devices of this kind are known for a variety of applications in various technical fields.
One example in this respect is a medical device for generating images of a patient, for example, in order to make a diagnosis or to provide assistance during a surgical intervention. In the interest of the patient a medical device of this kind should satisfy very severe requirements with respect to safety.
A medical imaging device of the kind set forth includes large amounts of hardware and software. For example, the central control unit is often formed by a personal computer or a workstation with software. Commercially available products are used to an increasing extent for this purpose. The amount of software necessary to control a personal computer increases every year. Because software is never completely correct or bug free, the risk of failure of the central processing unit due to a software error increases as the amount of software increases. The hardware also has a limited service life only and defects occurring therein may lead to a breakdown of the central control unit. The central control unit may become inoperative for short or long periods of time, depending on the cause.
This may have detrimental effects on the safety of the patient, because the central control unit controls the peripheral apparatus which include medical imaging equipment in the present example, for example, X-ray equipment.

[0002] The document US 4,991,193 describes a system safety monitor for CT scanners including a gantry, a processing unit, a system monitor, a CPU and a multiprocessor module.

[0003] It is an object of the present invention to provide a device of the kind set forth which is arranged to minimize the period of time during which the device is completely out of service after a breakdown of the central control unit.

[0004] To this end, one or more of the peripheral apparatus in the device in accordance with the invention are provided with separate emergency control means which are arranged to allow the peripheral apparatus provided with the separate emergency control means to operate independently from the central control unit, the device also being provided with an emergency control unit for controlling the separate emergency control means. Providing a number of peripheral apparatus with emergency control means designates such apparatus as being essential. The emergency control unit takes over a part of the tasks of the central control unit, for example, the control of and the communication with and between the essential peripheral apparatus necessary for the operation of the medical imaging device. In the case of failure of the central control unit, the essential peripheral apparatus can operate without intervention by the central control unit. Moreover, such essential peripheral apparatus usually comprise less software so that they have a shorter starting-up time and hence can become operative faster than the central control unit.

[0005] The emergency control unit in a first preferred embodiment includes a processor with software which is arranged to control the peripheral apparatus provided with emergency control means in an emergency mode. Such an emergency mode may involve, for example, a minimum functionality of the relevant essential peripheral apparatus which suffices to ensure the safety of the patient.

[0006] The emergency control unit in a practical preferred embodiment is formed by the interface unit which connects the central control unit to the peripheral apparatus. Such an interface unit is present anyway and can operate separately from the central control unit.

[0007] Each of the emergency control means in a further preferred embodiment includes a separate processor with software for controlling the relevant essential peripheral apparatus in an emergency mode.

[0008] The emergency control means in an elegant preferred embodiment are plug-in cards, for example, of the PCI type. Plug-in cards of this kind are readily accessible, thus offering advantages inter alia for maintenance, repair and/or replacement, for example, for an upgrade. Said plug-in cards are commercially available and can be economically made suitable for use in conjunction with the present invention.

[0009] The emergency control unit in a further preferred embodiment is connected to the peripheral apparatus provided with emergency control means by way of separate bus connections. Because of the use of own bus connections instead of the bus connections already existing between the peripheral apparatus and the central control unit, suitable operation of the medical imaging device in an emergency situation is ensured even better.

[0010] An example of a medical imaging device includes an X-ray source, an X-ray detector and image processing means for forming an X-ray image, the X-ray source, the X-ray detector and the image processing means all being provided with separate emergency control means.

[0011] The invention also relates to a method of using the medical imaging device in accordance with the invention, which method includes the following steps:

• starting the emergency control unit autonomously,
• checking and synchronizing the separate emergency control means of the peripheral apparatus by means of the emergency control unit, and
• executing user commands by way of the emergency control unit and the separate emergency control means.

[0012] The invention also relates to a computer program for carrying out the method in accordance with the invention.

[0013] The invention will be described in detail hereinafter with reference to the drawings; therein:

Fig. 1 is a diagrammatic representation of a preferred embodiment of the device in accordance with the invention, and

Fig. 2 shows a diagram illustrating the operation of the device shown in Fig. 1.

[0014] Fig. 1 is a diagrammatic representation of a medical imaging device 1 in accordance with the invention. The device 1 includes a central processing unit 2 which communicates with a number of peripheral apparatus 3. The peripheral apparatus 3 are diagrammatically represented and, generally speaking, include all means that can be considered to be essential to the functioning of the device 1. In the preferred embodiment shown, such means are to be understood to be all means necessary to form an image of the patient. Generally speaking, such essential means include data acquisition equipment for the acquisition of patient data and image processing means for the processing and/or manipulating and display of the data. It is to be noted that, generally speaking, the composition of the essential peripheral equipment is dependent on the application. After having read the above text, any person skilled in the present technical field will be able to configure such apparatus.

[0015] The device 1 in the preferred embodiment shown is an X-ray device for the formation of images of a patient, said images being intended for medical applications. For the purpose of illustration, the data acquisition equipment of the preferred embodiment shown includes, for example, an X-ray source 4 and an X-ray detector 5. The image processing means are denoted by the reference numeral 6 and include, generally speaking, for example, an image processing unit and an image display unit.

[0016] During normal operation of the device 1 the central processor unit 2 communicates with the peripheral apparatus 3 via bus connections 9 and the interface unit 7. The object may be, for example, to provide assistance for interventional operations such as the introduction of a catheter into a patient. User commands can be entered by way of user interfaces 11 such as a keyboard or a mouse.

[0017] In the case of a breakdown of the central control unit 2, the device 1 will be out of operation for a short or longer period of time. In accordance with the invention, however, the interface unit 7 restarts very soon, that is, preferably within a few tens of seconds. The interface unit 7 then acts as an emergency control unit or an emergency interface unit. The emergency interface unit takes over a part of the tasks of the central control unit 2, for example, the control of and the communication with and between the essential peripheral apparatus 3 which are necessary for operation of the device 1. To this end, the emergency interface unit 7 includes a suitable processor with suitable programs or software. The emergency interface unit 7 communicates with the essential peripheral apparatus 3, in this case being the X-ray source 4, the X-ray detector 5 and the image processing means 6, by way of separate bus connections 8. Each of the essential peripheral apparatus 3 is provided with separate emergency control means (not shown). The emergency control means are arranged for autonomous control of the relevant peripheral apparatus and include at least a processor with suitable software which allows the associated peripheral apparatus to function independently from the central control unit. The emergency control means may also be provided with electronic circuitry which is known per se and is necessary for operation of the relevant peripheral apparatus. Alternatively, the emergency control means may form an interface to a further peripheral apparatus having a comparable function. Preferably, the emergency control means are formed by plug-in cards which are known in this technical field. The type is dependent on the hardware configuration and may be PCI, VME or any other suitable type.

[0018] In the situation shown it suffices for the essential peripheral apparatus 3 to function in an emergency mode. This means that the device 1 offers the minimum functionality required to ensure the safety of the patient. For the preferred embodiment of an X-ray device as shown this means that the X-ray source 4, the X-ray detector 5 and the image processing means 6 function in such a manner that images of adequate quality can be formed of the patient. The processor and associated software of the emergency control unit 7 and the emergency control means are adequate for this purpose.

[0019] It is to be noted that other means could also perform the function of said emergency interface unit, that is, the control of the essential peripheral apparatus. For example, the functionality of the emergency interface unit could be added to the emergency control means of one (or more) of the peripheral apparatus. The relevant peripheral apparatus should communicate with the other peripheral apparatus provided with emergency control means.

[0020] Fig. 2 shows the main steps carried out by the programs or software of the emergency interface unit 7 in response to a failure of the central control unit 2. The emergency interface unit 7 is autonomously started up in the step 10. Upon starting up, the emergency interface unit 7 establishes, in the step 20, a connection with the essential peripheral apparatus 3 and checks whether the emergency control means are available. This check can be carried out, for example, by means of a handshake protocol which is known per se. If necessary, the emergency control means are synchronized. In the step 30 the emergency interface unit 7 and the emergency control means are standby. Activation is awaited, for example, by way of a user command from step 35, for example, a request for X-rays by the user. The user can make such a request by way of the user interfaces 11 as shown in Fig. 1. In the emergency mode the request is carried out by means of the emergency interface unit 7 and the emergency control means. The central control unit 2 is provided with means for deactivating the emergency interface unit 7, the emergency control means of the essential peripheral apparatus 3 and the associated software. If a situation occurs where the central control unit 2 functions again after some time, said deactivation means are switched on in the step 40. In the step 50 the device 1 then returns from the emergency mode to the normal mode of operation. It is to be noted that the device 1 in the described preferred embodiment is always standby in the emergency mode for some time upon starting up. When a user command fails to appear and the central control unit functions normally, the device 1 will subsequently change over to the normal mode of operation.

[0021] The step 25 deals with the situation in which the emergency control means and/or the emergency control unit are not ready to make the device 1 operate in the emergency mode. In that case the device 1 can function only in the normal mode of operation and awaits a change-over to the step 50.

[0022] The present invention is particularly suitable for use in conjunction with a variety of medical imaging devices which are intended for operation in an environment where safety is the most important factor. Generally speaking, at least the data acquisition equipment and the image processing means thereof should be provided with emergency control means. A so-called cardiovascular X-ray device for carrying out computed tomography forms an example of a further X-ray device in which the invention can be used. To this end, the data acquisition equipment (such as the X-ray equipment) and the image processing means should be provided with emergency control means. The invention is also suitable, for example, for use in MRI devices. The data acquisition equipment, such as a gradient amplifier, an RF amplifier, an RF receiver and the image processing means, such as a reconstructor and possibly a monitor, of such an MRI device should be provided with emergency control means in the context of the invention. In the cited examples the emergency mode enables the formation of images of the patient to be continued, be it perhaps to a limited extent.

[0023] Summarizing, it may be stated that the invention teaches an expert to make a medical imaging device of the described kind, being intended for use in a safety critical environment, operate in an emergency mode in the case of failure of the central control unit. To this end, the essential peripheral apparatus, being controlled by the central control unit in the normal mode of operation, are provided with emergency control means for making the relevant peripheral apparatus function independently from said central control unit. A separate control unit is provided for controlling the peripheral apparatus.

[0024] After having taken notice of the foregoing, a person skilled in the art will be readily capable of carrying out the invention in practice. Hardware suitable for this purpose, such as processors, bus connections and electronic circuitry is well known in this technical field. The development of the necessary software as mentioned will not be problematic either for such a skilled person. The design of such software may be inspired by the hardware and/or software provided in the devices which are known for use in a safety critical environment in this technical field and all functionality which is superfluous for the purpose of the invention can be removed therefrom.

[0025] The invention, therefore, in a general sense covers any embodiment that is within the scope of the appended claims, viewed in the light of the foregoing description and the drawings.

Claims

1. A medical imaging device (1) which includes a central control unit (2) and a plurality of peripheral apparatus (3) which communicate with the central control unit, characterised by one or more of the peripheral apparatus (3) being provided with separate emergency control means which are arranged to allow the peripheral apparatus (3) to operate independently from the central control unit (2), the device (1) also being provided with an emergency control unit (7) for controlling the separate emergency control means.

2. A medical imaging device (1) as claimed in claim 1, in which the emergency control unit (7) includes a processor with software which is arranged to control the peripheral apparatus (3) provided with emergency control means in an emergency mode.

3. A medical imaging device (1) as claimed in claim 1 or 2, in which the emergency control unit (7) is formed by the interface unit which connects the central control unit (2) to the peripheral apparatus (3).

4. A medical imaging device (1) as claimed in one of the preceding claims, in which each of the emergency control means includes a separate processor with software for controlling the relevant peripheral apparatus (3) in an emergency mode.

5. A medical imaging device (1) as claimed in claim 4, in which the emergency control means are plug-in cards, for example, of the PCI type.

6. A medical imaging device (1) as claimed in one of the preceding claims, in which the emergency control unit (7) and the peripheral apparatus (3) provided with emergency control means are connected by way of separate bus connections (8, 9).

7. A medical imaging device (1) as claimed in one of the preceding claims, which device includes an X-ray source (4), an X-ray detector (5) and image processing means (6) for forming an X-ray image, the X-ray source (4), the X-ray detector (5) and the image processing means (6) all being provided with separate emergency control means.

8. A method of using a medical imaging device (1) as claimed in one of the preceding claims in a safety critical environment, which method includes the following steps:

- starting (30) the emergency control unit (7) autonomously,

- checking and synchronizing (20) the separate emergency control means of the peripheral apparatus (3) by means of the emergency control unit (7), and

- executing user commands (35) by way of the emergency control unit (7) and the separate emergency control means.

9. A computer program for carrying out the method claimed in claim 8.

Ansprüche

1. Medizinische Bildgebungsvorrichtung (1) mit einer zentralen Steuereinheit (2) und einer Vielzahl von Peripheriegeräten (3), die mit der zentralen Steuereinheit kommunizieren, dadurch gekennzeichnet, dass eines oder mehrere der Peripheriegeräte (3) mit separaten Notsteuermitteln ausgestattet sind, die vorgesehen sind, um eine von der zentralen Steuereinheit (2) unabhängige Funktion der Peripheriegeräte (3) zu ermöglichen, wobei die Vorrichtung (1) auch mit einer Notsteuereinheit (7) zum Steuern der separaten Notsteuermittel ausgestattet ist.

2. Medizinische Bildgebungsvorrichtung (1) nach Anspruch 1, wobei die Notsteuereinheit (7) einen Prozessor mit Software umfasst, die vorgesehen ist, um die mit Notsteuermitteln ausgestatteten Peripheriegeräte (3) in einem Notbetrieb zu steuern.

3. Medizinische Bildgebungsvorrichtung (1) nach Anspruch 1 oder 2, in der die Notsteuereinheit (7) durch die Schnittstelleneinheit gebildet wird, die die zentrale Steuereinheit (2) mit den Peripheriegeräten (3) verbindet.

4. Medizinische Bildgebungsvorrichtung (1) nach einem der vorhergehenden Ansprüche, wobei jedes der Notsteuermittel einen separaten Prozessor mit Software umfasst, um das betreffende Peripheriegerät (3) in einem Notbetrieb zu steuern.

5. Medizinische Bildgebungsvorrichtung (1) nach Anspruch 4, wobei die Notsteuermittel Steckkarten sind, zum Beispiel vom PCI-Typ.

6. Medizinische Bildgebungsvorrichtung (1) nach einem der vorhergehenden Ansprüche, wobei die Notsteuereinheit (7) und die Peripheriegeräte (3) mit Notsteuermitteln mittels separater Busverbindungen (8,9) miteinander verbunden sind.

7. Medizinische Bildgebungsvorrichtung (1) nach einem der vorhergehenden Ansprüche, wobei die Vorrichtung eine Röntgenquelle (4), einen Röntgendetektor (5) und Bildverarbeitungsmittel (6) zum Erzeugen eines Röntgenbildes umfasst, und wobei die Röntgenquelle (4), der Röntgendetektor (5) und die Bildverarbeitungsmittel (6) jeweils mit separaten Notsteuermitteln ausgestattet sind.

8. Verfahren zur Verwendung einer medizinischen Bildgebungsvorrichtung (1) nach einem der vorhergehenden Ansprüche in einer sicherheitskritischen Umgebung, wobei das Verfahren die folgenden Schritte umfasst:

- autonomes Starten (10) der Notsteuereinheit (7);

- mittels der Notsteuereinheit (7) Prüfen und Synchronisieren (20) der separaten Notsteuermittel der Peripheriegeräte (3); und

- Ausführen von Benutzerbefehlen (35) durch die Notsteuereinheit (7) und die separaten Notsteuermittel.

9. Computerprogramm zum Ausführen des Verfahrens nach Anspruch 8.

Revendications

1. Dispositif d'imagerie médicale (1) qui comprend une unité de commande centrale (2) et une pluralité d'appareils périphériques (3) qui communiquent avec l'unité de commande centrale, caractérisé en ce qu'un ou plusieurs des appareils périphériques (3) sont munis de moyens de commande d'urgence distincts qui sont agencés pour permettre aux appareils périphériques (3) de fonctionner indépendamment de l'unité de commande centrale (2), le dispositif (1) étant également muni d'une unité de commande d'urgence (7) pour commander les moyens de commande d'urgence distincts.

2. Dispositif d'imagerie médicale (1) selon la revendication 1, dans lequel l'unité de commande d'urgence (7) comprend un processeur avec un logiciel qui est agencé pour commander les appareils périphériques (3) munis de moyens de commande d'urgence dans un mode d'urgence.

3. Dispositif d'imagerie médicale (1) selon la revendication 1 ou 2, dans lequel l'unité de commande d'urgence (7) est formée par l'unité d'interface qui connecte l'unité de commande centrale (2) aux appareils périphériques (3).

4. Dispositif d'imagerie médicale (1) selon l'une quelconque des revendications précédentes, dans lequel chacun des moyens de commande d'urgence comprend un processeur distinct avec un logiciel pour commander les appareils périphériques (3) pertinents dans un mode d'urgence.

5. Dispositif d'imagerie médicale (1) selon la revendication 4, dans lequel les moyens de commande d'urgence sont des cartes d'extension, par exemple, du type PCI.

6. Dispositif d'imagerie médicale (1) selon l'une quelconque des revendications précédentes, dans lequel l'unité de commande d'urgence (7) et les appareils périphériques (3) munis de moyens de commande d'urgence sont connectés par le biais de connexions de bus distinctes (8, 9).

7. Dispositif d'imagerie médicale (1) selon l'une quelconque des revendications précédentes, dans lequel le dispositif comprend une source de rayons X (4), un détecteur de rayons X (5) et des moyens de traitement d'image (6) pour former une image de rayons X, la source de rayons X (4), le détecteur de rayons X (5) et les moyens de traitement d'image (6) étant tous munis de moyens de commande d'urgence distincts.

8. Procédé d'utilisation d'un dispositif d'imagerie médicale (1) selon l'une quelconque des revendications précédentes dans un environnement à sécurité critique, lequel procédé comprend les étapes suivantes :

- démarrer (10) l'unité de commande d'urgence (7) de manière autonome,

- contrôler et synchroniser (20) les moyens de commande d'urgence distincts des appareils périphériques (3) par le biais de l'unité de commande d'urgence (7), et

- exécuter des commandes d'utilisateur (35) par le biais de l'unité de commande d'urgence (7) et des moyens de commande d'urgence distincts.

9. Programme informatique pour effectuer le procédé selon la revendication 8.

Drawing